PT-2026-2582 · Tenda · Tenda Ax3
CVE-2025-71025
·
Publicado
2025-12-29
·
Atualizado
2026-01-13
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Tenda AX-3 version 16.03.12.10 CN
Description
The Tenda AX-3 device contains a stack overflow issue in the
cloneType2 parameter of the fromAdvSetMacMtuWan function. A crafted request can trigger a Denial of Service (DoS) condition.Recommendations
Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the
fromAdvSetMacMtuWan function until a patch is available.Exploit
Correção
Stack Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Tenda Ax3